$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/2815E7D4BF4211E9A93A3957C4F9AE02.roa File: 2815E7D4BF4211E9A93A3957C4F9AE02.roa (raw, json) Hash identifier: uc6e0++QGsUcaAl/ez080qgy7o7+IjlFDBybPJucEhI= Subject key identifier: FA:CB:A6:D6:59:97:3C:75:94:88:A4:7E:DC:2F:27:94:8C:FD:28:5F Certificate issuer: /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Certificate serial: 2C74 Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/2815E7D4BF4211E9A93A3957C4F9AE02.roa Signing time: Tue 28 Jul 2026 16:22:20 +0000 ROA not before: Tue 28 Jul 2026 16:22:20 +0000 ROA not after: Sat 28 Nov 2026 00:00:00 +0000 asID: 9988 IP address blocks: 43.224.40.0/22 maxlen: 24 103.25.12.0/22 maxlen: 22 203.81.64.0/19 maxlen: 19 203.81.64.0/21 maxlen: 22 203.81.72.0/21 maxlen: 22 203.81.76.0/24 maxlen: 24 203.81.80.0/21 maxlen: 22 203.81.84.0/24 maxlen: 24 203.81.85.0/24 maxlen: 24 203.81.88.0/21 maxlen: 22 203.81.92.0/24 maxlen: 24 203.81.93.0/24 maxlen: 24 203.81.95.0/24 maxlen: 24 2401:f200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11380 (0x2c74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D Validity Not Before: Jul 28 16:22:20 2026 GMT Not After : Nov 28 00:00:00 2026 GMT Subject: CN=6a68d73c-337e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:24:7f:9f:94:4d:cd:23:52:50:19:e6:f9: 8c:5a:ff:c4:2a:9e:20:75:31:39:a1:6e:56:85:8c: 6f:5f:97:47:cd:6d:9c:40:7a:80:c2:a7:f8:1a:ca: 46:de:6b:73:17:55:d0:80:40:cb:b5:8c:5a:d2:5b: 6d:f1:52:fd:61:45:18:06:22:5a:f1:41:95:2e:a3: d1:75:e0:0a:12:e6:b2:8a:4f:e9:7b:96:79:bc:a1: 92:c1:7a:01:27:8c:ae:c0:73:5b:b3:bc:d4:a2:e0: 39:85:93:4e:24:00:9a:98:42:7a:a5:89:d9:e4:c8: 97:94:7c:1f:e0:33:81:cd:f2:8a:b3:86:19:da:3e: c5:53:0b:d4:69:00:99:9b:63:96:3b:a2:28:f8:95: e6:b9:32:c8:aa:4b:8f:16:8c:70:5b:b6:56:b9:f2: d3:c0:e8:a6:39:f2:3a:ca:08:c0:2d:10:86:32:39: 57:1d:8c:94:1b:36:66:91:95:49:b0:45:db:52:af: 42:a6:b7:a3:a6:b1:b0:bf:3a:52:80:2b:21:c1:18: bd:8a:3f:35:a9:c1:15:8b:42:d2:de:36:cf:9e:e0: 91:1c:af:45:64:fa:b2:92:a6:e2:7c:ec:9d:d3:8c: 1e:1f:19:24:0e:94:af:b8:80:4f:a1:53:ba:b7:df: 9b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CB:A6:D6:59:97:3C:75:94:88:A4:7E:DC:2F:27:94:8C:FD:28:5F X509v3 Authority Key Identifier: keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/2815E7D4BF4211E9A93A3957C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.40.0/22 103.25.12.0/22 203.81.64.0/19 IPv6: 2401:f200::/32 Signature Algorithm: sha256WithRSAEncryption 21:a6:25:54:69:55:c2:ae:0d:d7:b1:95:e5:f4:21:2c:f6:08: 6b:5c:76:ea:e6:d3:a5:8f:a1:b9:ce:47:5b:80:69:09:2a:7e: 46:d9:cd:e5:33:98:6c:6d:55:92:ca:64:9e:f0:06:ff:2d:53: cb:cb:67:78:3a:29:fe:c2:01:23:8d:0b:2d:1d:d8:a0:d5:6e: 55:16:73:a3:52:63:9c:88:21:32:fd:5e:42:ee:da:5b:2c:50: 36:cb:61:bd:3a:48:34:c6:44:04:8f:69:59:f4:9d:06:bf:36: b3:57:1f:b2:01:4c:a2:1f:9a:1d:3c:f5:b2:2e:fd:7a:71:2c: 2a:72:d7:05:1a:7d:b4:b3:1a:10:d6:8f:67:5f:3b:5c:57:89: 9a:86:68:66:7d:6f:7b:d5:29:c4:6b:e7:ee:d2:d4:84:40:b7: e5:20:ac:4c:5c:a6:76:f0:08:2f:fb:43:f1:e6:96:a2:a8:74: fd:25:79:df:b3:cc:28:2d:60:09:1f:23:c3:bb:f1:9b:6c:1a: 1f:58:81:35:ed:3d:60:80:a6:a4:cb:12:65:1b:ea:c9:5c:a2: fe:ec:40:d5:5f:37:50:36:43:1b:16:b8:c3:3b:ef:13:ee:91: b0:a4:7e:bb:70:b8:13:60:96:83:71:7e:38:22:15:58:9f:31: 50:be:8f:df -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICLHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKEI0M0E1QTYwRDQ2ODA2QTY5RkZFRjdDNjc2MjE5RUM0 QkE4QkEzNkQwHhcNMjYwNzI4MTYyMjIwWhcNMjYxMTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4ZDczYy0zMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZkkf5+UTc0jUlAZ5vmMWv/EKp4gdTE5oW5WhYxvX5dHzW2cQHqAwqf4GspG 3mtzF1XQgEDLtYxa0ltt8VL9YUUYBiJa8UGVLqPRdeAKEuayik/pe5Z5vKGSwXoB J4yuwHNbs7zUouA5hZNOJACamEJ6pYnZ5MiXlHwf4DOBzfKKs4YZ2j7FUwvUaQCZ m2OWO6Io+JXmuTLIqkuPFoxwW7ZWufLTwOimOfI6ygjALRCGMjlXHYyUGzZmkZVJ sEXbUq9CprejprGwvzpSgCshwRi9ij81qcEVi0LS3jbPnuCRHK9FZPqykqbifOyd 04weHxkkDpSvuIBPoVO6t9+blQIDAQABo4ICezCCAncwHQYDVR0OBBYEFPrLptZZ lzx1lIikftwvJ5SM/ShfMB8GA1UdIwQYMBaAFLQ6WmDUaAamn/73xnYhnsS6i6Nt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS84RDNFNTRFQUVE NTkxMUUzQjA5MDExOTI1OTExRUEzMi90RHBhWU5Sb0JxYWZfdmZHZGlHZXhMcUxv MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3REcGFZTlJvQnFhZl92ZkdkaUdleExxTG8yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJBRTUvOEQzRTU0RUFFRDU5MTFFM0IwOTAxMTkyNTkxMUVBMzIvMjgxNUU3RDRC RjQyMTFFOUE5M0EzOTU3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK+AoAwQCZxkMAwQFy1FAMA0EAgACMAcDBQAkAfIAMA0GCSqGSIb3 DQEBCwUAA4IBAQAhpiVUaVXCrg3XsZXl9CEs9ghrXHbq5tOlj6G5zkdbgGkJKn5G 2c3lM5hsbVWSymSe8Ab/LVPLy2d4Oin+wgEjjQstHdig1W5VFnOjUmOciCEy/V5C 7tpbLFA2y2G9Okg0xkQEj2lZ9J0GvzazVx+yAUyiH5odPPWyLv16cSwqctcFGn20 sxoQ1o9nXztcV4mahmhmfW971SnEa+fu0tSEQLflIKxMXKZ28Agv+0Px5paiqHT9 JXnfs8woLWAJHyPDu/GbbBofWIE17T1ggKakyxJlG+rJXKL+7EDVXzdQNkMbFrjD O+8T7pGwpH67cLgTYJaDcX44IhVYnzFQvo/f -----END CERTIFICATE-----Generated at Tue Oct 6 09:35:05 2026 by rpki-client